santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

sinter

Sinter Sinter es un agente de seguridad de endpoints 100% en modo usuario para macOS 10.15 y superior, escrito en Swift. Sinter utiliza la API EndpointSecurity en modo usuario para suscribirse y recibir devoluciones de llamada de autorización del kernel de macOS para un conjunto de tipos de event...

CVE-2019-8805

CVE-2019-8805 Exploit para CVE-2019-8805 escalada de privilegios del framework EndpointSecurity de Apple Existía un problema de validación en la verificación de entitlements. Este problema se solucionó mejorando la validación del entitlement del proceso. Este problema se corrigió en macOS Catalin...

ESFang

ESFang Esta es una herramienta diseñada para el consumo modular de eventos del EndpointSecurity Framework ESF en el entorno macOS. Es mi intento de superar una serie de problemas encontrados con las herramientas existentes, como la pérdida silenciosa de datos, el consumo estricto de tipos de...

Apple confirms Macs get malware

Anyone following the court case between Epic and Apple is undoubtedly already aware of the "bombshell" dropped by Apples Craig Federighi yesterday. For those not in the know, Federighi, as part of his testimony relating to the security of Apples mobile device operating system, iOS, stated that "w...

Apple security hampers detection of unwanted programs

Anyone who uses Malwarebytes software is probably familiar with the fact that, in addition to things like malware and adware, Malwarebytes detects potentially unwanted programs PUPs. These are programs that exhibit a variety of unsavory behaviors, but that, for legal reasons, cannot be called...